This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
File: AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft (raw, json)
Hash identifier: FwZDa5YvA4/SxP5i8bRvy07Qkbr+pbYH6huzKTqZeQA=
Subject key identifier: B0:B2:7C:28:D1:67:50:FB:31:4B:0F:E8:DC:6A:1E:96:72:22:3F:37
Authority key identifier: AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
Certificate issuer: /CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Certificate serial: 20F3AEC89733A04BAB08C9A3220BCBBB2CAAF87D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
Manifest number: 021B
Signing time: Sat 20 Dec 2025 01:09:52 +0000
Manifest this update: Sat 20 Dec 2025 01:04:52 +0000
Manifest next update: Sun 21 Dec 2025 01:32:52 +0000
Files and hashes: 1: AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl (hash: Lp6UI/EuRQ8JltlBKqCvQ7JA5pgmYdwNGg9j7blivTU=)
2: 323830343a323533633a3a2f33322d313238203d3e20323634323637.roa (hash: lJfA/yR5OSfz2uZV5mR5QEGG1Hs/os0F7/PG4G01w8o=)
3: 3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa (hash: nVS1ig476qeVEp3ktQ874Yh7cQPZ9tR3j/G5N42qT4o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl
rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 01:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f3:ae:c8:97:33:a0:4b:ab:08:c9:a3:22:0b:cb:bb:2c:aa:f8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Validity
Not Before: Dec 20 01:04:52 2025 GMT
Not After : Dec 21 01:32:52 2025 GMT
Subject: CN=B0B27C28D16750FB314B0FE8DC6A1E9672223F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:a8:3e:1c:88:5e:4c:c9:49:c4:76:9c:89:
73:7b:d4:8a:5e:66:c0:0a:cf:ab:24:47:da:c3:a1:
62:98:12:5e:5d:62:fd:02:cd:13:4d:14:28:b1:62:
40:cd:bf:5a:4c:41:c3:e8:3f:06:8b:2e:f6:b4:f6:
02:ed:b4:eb:d1:79:72:bb:aa:be:5a:5a:17:db:f1:
bf:2d:d3:0d:50:ce:95:26:1d:34:8d:11:f2:e3:29:
84:36:2d:da:c6:a5:b5:67:ac:6e:0f:0e:74:30:b7:
de:ab:7a:19:68:d9:38:b7:e5:ef:c3:a1:cf:f6:4b:
c0:1b:00:99:b7:a8:c7:16:83:7a:40:94:bd:ec:78:
68:92:d0:35:9f:b0:9b:24:68:6e:cf:4b:1e:02:b9:
93:39:20:a0:f8:df:8d:8c:52:7a:83:0c:ac:0f:04:
f9:ec:9a:cc:3d:07:bb:b6:4a:9b:0a:0f:05:05:a9:
cc:60:2a:58:62:46:40:9f:94:f1:af:a3:f9:06:ff:
85:cb:56:7c:99:38:f9:4c:b7:1d:7c:84:e3:aa:eb:
cc:76:47:a5:d9:0d:89:2e:23:9e:66:fa:9e:93:e8:
ea:c4:48:ea:21:e0:b0:28:1a:ce:fa:42:19:69:c1:
3c:26:42:12:07:1a:cb:75:fe:f9:2d:f4:74:e2:14:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B2:7C:28:D1:67:50:FB:31:4B:0F:E8:DC:6A:1E:96:72:22:3F:37
X509v3 Authority Key Identifier:
keyid:AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fb:33:36:ff:05:9f:48:bc:02:fb:60:c4:db:ad:4d:e9:d0:
71:77:37:96:ae:5f:e8:94:ef:ce:24:4f:ee:02:03:2f:1e:89:
cc:f2:37:9c:7e:e2:6e:67:70:21:f6:da:13:5d:4e:0d:19:35:
1d:bc:ec:cd:38:3e:3c:c3:71:f0:fb:57:1e:4a:b2:07:d5:da:
9a:5d:5c:1c:ea:fd:3a:f7:f7:be:c7:e1:20:67:d2:f9:13:9b:
07:db:9c:33:92:92:50:58:6a:61:15:49:f6:1b:23:b8:47:ae:
91:ea:59:73:f6:83:c6:a5:eb:01:09:93:c5:5d:82:6a:de:85:
0d:c2:9e:ca:2b:20:c6:b7:29:bc:72:98:63:be:15:b2:45:ad:
3a:56:83:70:2a:c4:96:70:f7:f3:8a:e6:28:2a:89:11:d7:4f:
3f:b5:ae:a3:a9:79:75:07:0c:0e:2d:a0:f5:32:9c:c4:6a:34:
be:95:f5:93:f5:8d:db:45:56:99:14:fc:7f:29:3e:11:a3:1c:
0f:2b:a7:5d:83:0b:65:1c:1a:6c:19:ff:40:2f:96:f8:0c:17:
4f:a5:93:2e:c3:74:1b:95:ce:e9:94:55:5d:9f:60:c3:f9:8a:
b6:38:3e:9c:8d:87:a4:cf:70:3b:85:63:d4:f4:19:82:41:bb:
45:ff:93:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIPOuyJczoEurCMmjIgvLuyyq+H0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUwQzE2ODYzRjRFQzMzNkFCNzk2NkQ5OUQwQUREMUND
OEI3NEVGODAeFw0yNTEyMjAwMTA0NTJaFw0yNTEyMjEwMTMyNTJaMDMxMTAvBgNV
BAMTKEIwQjI3QzI4RDE2NzUwRkIzMTRCMEZFOERDNkExRTk2NzIyMjNGMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAag+HIheTMlJxHaciXN71Ipe
ZsAKz6skR9rDoWKYEl5dYv0CzRNNFCixYkDNv1pMQcPoPwaLLva09gLttOvReXK7
qr5aWhfb8b8t0w1QzpUmHTSNEfLjKYQ2LdrGpbVnrG4PDnQwt96rehlo2Ti35e/D
oc/2S8AbAJm3qMcWg3pAlL3seGiS0DWfsJskaG7PSx4CuZM5IKD4342MUnqDDKwP
BPnsmsw9B7u2SpsKDwUFqcxgKlhiRkCflPGvo/kG/4XLVnyZOPlMtx18hOOq68x2
R6XZDYkuI55m+p6T6OrESOoh4LAoGs76QhlpwTwmQhIHGst1/vkt9HTiFNAJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsLJ8KNFnUPsxSw/o3GoelnIiPzcwHwYDVR0j
BBgwFoAUrgwWhj9OwzareWbZnQrdHMi3TvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFJBV2pzOEpSODg5Rmh2SmVYc1dyTFV1VHNvdE1OOXE5cWRZUVpCVjJ6
YVAvMC9BRTBDMTY4NjNGNEVDMzM2QUI3OTY2RDk5RDBBREQxQ0M4Qjc0RUY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMEMxNjg2M0Y0RUMzMzZB
Qjc5NjZEOTlEMEFERDFDQzhCNzRFRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFJBV2pzOEpSODg5Rmh2SmVYc1dyTFV1VHNvdE1OOXE5cWRZUVpCVjJ6YVAvMC9B
RTBDMTY4NjNGNEVDMzM2QUI3OTY2RDk5RDBBREQxQ0M4Qjc0RUY4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPvszNv8Fn0i8AvtgxNutTenQcXc3lq5f6JTvziRP7gIDLx6JzPI3nH7ibmdw
IfbaE11ODRk1HbzszTg+PMNx8PtXHkqyB9Xaml1cHOr9Ovf3vsfhIGfS+RObB9uc
M5KSUFhqYRVJ9hsjuEeukepZc/aDxqXrAQmTxV2Cat6FDcKeyisgxrcpvHKYY74V
skWtOlaDcCrElnD384rmKCqJEddPP7Wuo6l5dQcMDi2g9TKcxGo0vpX1k/WN20VW
mRT8fyk+EaMcDyunXYMLZRwabBn/QC+W+AwXT6WTLsN0G5XO6ZRVXZ9gw/mKtjg+
nI2HpM9wO4Vj1PQZgkG7Rf+TRA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:07:03 2025 by rpki-client